Blog
EMS Cybersecurity Insights & Resources
Tabletop Exercises That Don't Waste a Chief's Afternoon
Four EMS-relevant tabletop scenarios, the injection format that produces a decision list, and the after-action template that gets used instead of filed.
Mutual Aid and the Data-Sharing Agreement You Don't Have
When units cross jurisdictional lines on a mutual aid call, patient data crosses too. Most agencies lack DUAs and unified IR plans across multiple MSPs.
QR-Code Quishing at the Station — Attack Patterns and Practical Defenses
Quishing attacks target fire and EMS stations through fake QR codes on posters and stickers. Here is how they work and what to do about it.
CJIS Compliance for Fire and EMS: The Shared CAD Problem
Fire and EMS agencies accessing NCIC data through shared CAD systems face CJIS audit failures on personnel screening, MFA, and data segregation.
Public Records Security: What To Never Release
A public safety security review: what records adversaries request, the statutory exemptions, and a review process every agency needs.
Social Engineering the Dispatch Center: Attack Scenarios and Verification Protocols
Three realistic social engineering attacks targeting public safety dispatch centers and the verification protocols that stop them.
The cPanel Bug That Compromised Thousands of Sites and Why Your Agency Should Care
CVE-2026-41940 in cPanel has compromised thousands of servers. Here is why your fire or EMS agency needs to check its hosting provider and what to ask.